Nortel Networks 2300 Switch User Manual


 
Configuring Web-based AAA for administrative and local access 75
Nortel WLAN—Security Switch 2300 Series Configuration Guide
Authenticating at the console
You can configure the console so that authentication is required, or so that no authentication is required. Nortel
recommends that you enforce authentication on the console port.
To enforce console authentication, take the following steps:
1 Add a user in the local database by typing the following command with a username and
password:
WSS# set user username password password
success: change accepted.
2 To enforce the use of console authentication via the local database, type the following
command:
WSS# set authentication console * local
3 To store this configuration into nonvolatile memory, type the following command:
WSS# save config
success: configuration saved.
By default, no authentication is required at the console. If you have previously required authentication and
have decided not to require it (during testing, for example), type the following command to configure the
console so that it does not require username and password authentication:
WSS# set authentication console * none
Caution! If you type this command before you have created a local username
and password, you can lock yourself out of the WSS. Before entering this
command, you must configure a local username and password.
Note. The authentication method none you can specify for administrative access is
different from the fallthru authentication type None, which applies only to network access.
The authentication method none allows access to the WSS by an administrator. The
fallthru authentication type None denies access to a network user. (For information about
the fallthru authentication types, see “Authentication algorithm” (page 469).)